Help us improve your experience.

Let us know what you think.

Do you have time for a two-minute survey?

TechLibrary
Navigation
Table of Contents
Guide That Contains This Content
[+] Expand All
[-] Collapse All

    Configuring the RADIUS NAS-Port-Type per Physical Interface

    As an alternative to globally configuring the NAS-Port-Type (61) RADIUS attribute in an access profile, you can configure the NAS-Port-Type on a per-physical interface basis as part of a NAS-Port options definition. The NAS-Port-Type specifies the type of physical port that the network access server (NAS) uses to authenticate the subscriber.

    Configuring NAS-Port options definitions on a per-physical interface basis is useful in network configurations that use a 1:1 access model or an N:1 access model.

    To configure the NAS-Port-Type RADIUS attribute per physical interface:

    1. Specify the interface you want to configure.
      [edit]user@host# edit interfaces interface-name
    2. Enable VLAN tagging on the interface.
      [edit interfaces interface-name]user@host# set vlan-tagging

      Setting VLAN tagging enables the reception and transmission of 802.1Q VLAN-tagged frames on the interface. You must enable VLAN tagging before you can configure the VLAN ranges to which the NAS-Port options definition applies.

    3. Specify that you want to configure RADIUS options for a physical interface.
      [edit interfaces interface-name]user@host# edit radius-options
    4. Create a named NAS-Port options definition.
      [edit interfaces interface-name radius-options]user@host# edit nas-port-options nas-port-options-name
    5. Configure the NAS-Port-Type.
      [edit interfaces interface-name radius-options nas-port-options nas-port-options-name]user@host# set nas-port-type port-type
    6. Configure the VLAN range or ranges to which the NAS-Port options definition applies.
      [edit interfaces interface-name radius-options nas-port-options nas-port-options-name]user@host# set vlan-ranges (any | low-tag–high-tag)

      Per-physical interface configurations typically require you to create a VLAN range that consists of all VLAN IDs on the physical interface. To do so, use the any option with the vlan-ranges statement.

    The following example shows a per-interface NAS-Port options definition named subscribers-east that configures the wireless-umts NAS-Port-Type for a VLAN range consisting of all VLAN IDs on Gigabit Ethernet physical interface ge-1/0/0.

    [edit interfaces ge-1/0/0 radius-options]
    nas-port-options subscribers-east {nas-port-type wireless-umts;vlan-ranges {any;}}
     

    Related Documentation

     

    Published: 2013-02-11

    Previous Page Next Page